privacy // last updated 2026-08-06

Privacy.

The short version: no accounts, no forms, no ad tracking, and nothing sold. We keep basic server logs and cookieless usage analytics so the site stays up and we can see what is read. Optional product analytics (PostHog and Google Analytics) depend on where you are: in the EU and UK we ask first and load nothing until you accept; elsewhere they are on by default and you can opt out any time. We honor Global Privacy Control everywhere. Questions or requests go to h@gortex.ai.

# 01 / who we are

Gortex is the controller of any personal data processed through this site. For anything in this notice, including data access, correction, or deletion requests and any grievance, the contact point is h@gortex.ai. We answer these ourselves.

# 02 / what we process

This is a static marketing site. It has no login, no account, and no form that stores what you type. In normal use we process two narrow things:

01 technical request data
Your IP address, user agent, and the pages requested, handled by our host to serve the site and keep it secure. This is standard server-log data, retained briefly.
02 cookieless analytics
Aggregate page views and referrers via Vercel Web Analytics, which sets no cookies, builds no cross-site profile, and does not identify you. It tells us which pages are read, nothing more. This runs for everyone.
03 optional product analytics
We use PostHog and Google Analytics to understand how visitors move through the site (which pages are visited, which links and CTAs are used). Each sets a first-party identifier on your device and sends event data, including your IP, to its provider in the United States. Both are covered by the same single choice: how they switch on depends on your region, so in the EU and UK they load only after you press accept (and never if you reject or ignore the banner), while elsewhere they are on by default and you can opt out from the same banner. If your browser sends a Global Privacy Control signal, we do not load either at all. You can change your choice any time via privacy choices in the footer.
# 03 / legal basis

Where the GDPR or UK GDPR applies, our basis for server logs and the cookieless Vercel analytics is legitimate interest (Article 6(1)(f)): operating, securing, and understanding use of the site. For the optional product analytics, PostHog and Google Analytics, which store an identifier on your device, EU and UK visitors are asked first and our basis is your consent (Article 6(1)(a)), collected through the banner before anything loads. Outside the EU and UK, where prior consent is not required, both run on an opt-out basis under the applicable local law, and we still honor Global Privacy Control. You can withdraw consent or opt out at any time via privacy choices in the footer, or object to the legitimate-interest processing by emailing us.

# 04 / who it reaches
01 vercel
Our hosting and cookieless-analytics provider, acting as a processor on our instructions.
02 posthog
Our product-analytics provider, acting as a processor. Reached only if you accept the consent banner.
03 google
Our web-analytics provider (Google Analytics), acting as a processor. Reached only if you accept the consent banner. We do not enable Google Signals, ad personalization, or any advertising feature.

We do not sell your personal data, share it for cross-context behavioral advertising, or use it for targeted ads. There is nothing here to opt out of on that front.

# 05 / international transfers

The site runs on Vercel's global infrastructure, which may process requests in the United States under standard transfer mechanisms. We self-host our fonts, so no personal data is sent to any third-party font CDN. When product analytics is active, that data is also processed by our analytics providers, PostHog and Google, in the United States; for visitors in the EEA or UK we rely on Standard Contractual Clauses as the safeguard for those transfers. If analytics is not active, no such transfer occurs.

# 06 / your rights

Depending on where you live, you may have rights to access, correct, delete, port, or object to the processing of your personal data, under the GDPR and UK GDPR, US state privacy laws, India's DPDP Act, and similar regimes. Because we hold so little, most requests are simple. To exercise any right, or to raise a grievance, email h@gortex.ai and we will respond within the time your law allows.

# 07 / cookies and device storage

By default we store two small preferences in your browser's local storage, which never leave your device and we never receive: your light or dark theme choice (gortex-theme) and your analytics consent choice (gortex-consent), so we remember not to ask again. We also set one strictly-necessary cookie, gx-region, that only records whether your region uses the ask-first or opt-out flow described above. Beyond that we set no cookies of our own. Only when product analytics is active do our providers set their own first-party identifiers to measure usage: PostHog stores an identifier on your device, and Google Analytics sets the cookies _ga and _ga_M0QS67F1ZB. Where you have rejected, opted out, or sent a Global Privacy Control signal, nothing of the sort is stored.

# 08 / changes

If this notice changes, we update this page and the date at the top. This version is dated 2026-08-06.